Route Origin Authorization
$ rpki-client -vvf rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a15af39-6818-4eeb-bbaf-283b7bfffba9.roa
File: 3a15af39-6818-4eeb-bbaf-283b7bfffba9.roa (raw, json)
Hash identifier: nR30KA3sV8dCD1NLOrLtQz+nus5QrZZ40ebxP/ROis0=
Subject key identifier: 50:9E:2B:10:04:E7:17:0A:00:F7:22:14:6A:F9:3F:40:92:97:47:57
Certificate issuer: /CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Certificate serial: 404B9FBD8E152B206F3888A80B643ECCF5E4C6CE
Authority key identifier: 8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject info access: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a15af39-6818-4eeb-bbaf-283b7bfffba9.roa
Signing time: Mon 01 Sep 2025 20:51:33 +0000
ROA not before: Mon 01 Sep 2025 20:51:33 +0000
ROA not after: Mon 06 Oct 2025 23:59:59 +0000
asID: 16509
IP address blocks: 2a05:d036::/32 maxlen: 32
Validation: OK
Signature path: rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.mft
rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Tue 09 Sep 2025 10:00:23 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
40:4b:9f:bd:8e:15:2b:20:6f:38:88:a8:0b:64:3e:cc:f5:e4:c6:ce
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=8b6263dbe9799dd6793e0e882ad21cb4849970bc
Validity
Not Before: Sep 1 20:51:33 2025 GMT
Not After : Oct 6 23:59:59 2025 GMT
Subject: serialNumber=a8810419f7e37c1d4f681871ed3bf0f18541c2b20ac607a5ccab17fe353f16b7, CN=6615a38b-3ad7-47b7-8fb2-685c38d00914
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a4:32:5e:4f:7f:b0:5b:29:c3:71:1f:28:35:02:
54:b1:4f:76:24:cf:5d:56:ce:38:a1:94:60:45:91:
b6:d1:37:03:d4:5d:4f:e9:a4:14:97:af:9b:26:08:
66:db:db:fe:4b:69:2d:49:01:7d:84:c6:76:cf:67:
95:35:b7:f4:d7:1b:d7:29:2d:63:08:b7:b1:f5:7e:
2a:da:4d:ff:63:84:25:7a:69:6a:f6:af:a7:86:15:
e0:e0:1e:73:e8:32:83:16:a6:04:52:61:df:4f:bb:
72:ec:62:9f:ef:35:6a:db:eb:b6:e4:a9:c3:f5:b1:
8a:cd:d5:d4:0f:8d:c7:8c:1d:cb:a8:82:5a:9e:db:
66:b2:eb:42:f0:bc:20:1a:84:cb:cb:97:5a:58:76:
9d:a6:ec:cf:4f:72:e9:b1:d7:85:a1:37:ae:40:39:
0a:24:a6:e5:80:72:06:e6:3f:8e:46:5f:56:01:19:
ca:2b:57:65:21:8f:bc:b1:60:ad:a3:8a:39:36:ee:
a1:2d:fb:64:5e:92:81:5a:46:a2:86:54:47:0a:f3:
aa:63:ba:62:f3:9f:a6:75:33:79:f0:dc:ed:c6:70:
37:b6:0c:23:a1:f2:6b:4e:d5:3c:e2:89:e0:42:1f:
d7:53:64:88:6d:41:67:f1:63:8a:2c:c6:11:08:72:
34:07
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
50:9E:2B:10:04:E7:17:0A:00:F7:22:14:6A:F9:3F:40:92:97:47:57
X509v3 Authority Key Identifier:
keyid:8B:62:63:DB:E9:79:9D:D6:79:3E:0E:88:2A:D2:1C:B4:84:99:70:BC
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/i2Jj2-l5ndZ5Pg6IKtIctISZcLw.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/3a15af39-6818-4eeb-bbaf-283b7bfffba9.roa
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rsync.us-east-2.amazonaws.com/volume/dba8f01c-9669-44a3-ac6e-db2edb099b84/uODatdtYc1HrhtUQVQyrDK08GeI.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv6:
2a05:d036::/32
Signature Algorithm: sha256WithRSAEncryption
2d:17:c6:7a:2f:83:37:18:04:1f:da:15:37:b1:9e:26:94:ad:
86:42:7d:22:0e:f2:eb:c3:52:30:12:56:7a:cd:e0:07:7f:0d:
7a:1e:bc:93:0b:db:48:42:48:a6:b7:15:d9:8b:3f:c3:11:6c:
c8:0b:f1:c9:5c:2f:b1:3e:d9:21:4e:3e:f9:78:ee:e5:f5:db:
64:7f:19:8c:b7:48:e9:86:4b:49:2d:7f:c5:88:1e:d5:08:7d:
db:c5:d5:97:37:25:1f:4d:ec:6d:1c:5c:c8:51:63:e7:41:12:
e1:df:16:81:1c:95:14:82:73:c7:b0:2f:cf:10:81:5b:2a:d3:
57:d0:f1:3a:53:27:bc:0c:85:29:0e:df:c1:c3:41:e5:2d:a3:
8b:91:6b:d1:f0:da:90:2a:df:f9:a3:98:75:ca:5c:a5:24:42:
04:d3:38:ca:53:f6:b9:f2:27:48:38:ce:e6:f1:b5:f3:0a:6f:
2f:c2:cc:9a:af:1f:64:9a:4d:b3:e4:a1:c1:ea:cb:bd:82:4f:
18:98:7d:76:d3:1c:92:ed:68:3f:11:ed:84:86:23:cb:56:96:
be:16:08:92:30:c5:2b:b8:56:a2:33:5e:dd:09:c1:3d:97:18:
72:16:13:89:88:30:6f:bc:ac:21:34:52:f6:29:4a:66:b7:d5:
ef:7b:1a:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Sep 8 12:09:21 2025 by rpki-client